3 ms·

If they don't limit and detail all use of the data, collection would (probably) be illegal under the gdpr.